When Your Ransomware Negotiator Works for the Other Side

Dark Reading security news roundup covering ransomware and extortion, AI-agent abuse and accountability, phishing and influence operations, ransomware-related physical threats, identity and SaaS compromise, OT and IoT vulnerabilities, zero-day exploitation, malware campaigns, and evolving defensive practices. Notable items include active exploitation of a critical SonicWall SMA SSRF flaw, an Ivanti ICS authentication-bypass/RCE vulnerability identified as CVE-2026-104935, credential theft via an Anthropic Claude Code Desktop flaw, and AI-agent risks affecting AWS and Wikimedia services.